Alerts from SecurityFocus Newsletter #310

Summarized by Daniel Convissor

APPLICATIONS USING PHP

• MySQL Eventum Multiple Cross-Site Scripting Vulnerabilities
• MySQL Eventum Multiple SQL Injection Vulnerabilities
• ChurchInfo Multiple SQL Injection Vulnerabilities
• PHPFreeNews Multiple Cross Site Scripting Vulnerabilities
• PHPFreeNews Admin Login SQL Injection Vulnerability
• OpenBook Admin.PHP SQL Injection Vulnerability
• Naxtor Shopping Cart Lost_password.PHP Cross Site Scripting Vulnerability
• Naxtor Shopping Cart Shop_Display_Products.PHP SQL Injection Vulnerability
• Web Content Management Multiple Cross-Site Scripting Vulnerabilities
• Web Content Management Administrator Account Unauthorized Access Vulnerability
• Silvernews Admin.PHP SQL Injection Vulnerability
• LogiCampus Helpdesk Unspecified Cross Site Scripting Vulnerability
• PortailPHP Index.PHP SQL Injection Vulnerability
• Comdev ECommerce Config.PHP Remote File Include Vulnerability
• Comdev eCommerce WCE.Download.PHP Directory Traversal Vulnerability
• Jax PHP Scripts Multiple Cross-Site Scripting Vulnerabilities
• Jax PHP Scripts Multiple Remote Information Disclosure Vulnerabilities
• PHPOpenChat Multiple HTML Injection Vulnerabilities
• FlatNuke Multiple Cross Site Scripting Vulnerabilities
• FlatNuke User Data Arbitrary PHP Code Execution Vulnerability
• PHP-Fusion Messages.PHP SQL Injection Vulnerability